$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: b+cJMCAU5Vli32LgfXCxbVfyVyzVEoadRi/BQdliT9A= Subject key identifier: 65:4E:C1:FC:AB:83:72:FF:DE:E5:9E:8B:E2:FF:44:E3:A5:D1:47:15 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: A2 Signing time: Thu 23 Jul 2026 00:05:53 +0000 Manifest this update: Thu 23 Jul 2026 00:05:53 +0000 Manifest next update: Thu 30 Jul 2026 00:05:53 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: yhsY2vSHwnob3wl37u7RF9PEoalSQ3qJ3320Kz1+BMM=) 2: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=) 3: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=) 4: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=) 5: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=) 6: 3D85F9E653BB11F19AC0B954B9833773.roa (hash: kXyzSAEuWraJGLeRl8Ev4HWfqkONz/RaOPivNONbhAA=) 7: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Jul 23 00:05:53 2026 GMT Not After : Jul 30 00:05:53 2026 GMT Subject: CN=6a615ae1-ebb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:ec:0d:8e:60:11:0b:0d:8a:cc:a8:0c:ca: 50:0c:67:06:15:5b:d5:d2:a1:90:bf:12:71:da:9c: b4:8a:b0:6a:bd:2d:3e:ba:c5:18:ee:c9:43:9b:29: 88:96:35:5a:8c:11:98:cf:7b:5c:bd:87:7c:95:2e: a2:b0:c8:51:38:6c:a6:a1:82:cc:c7:7f:05:4a:8c: b5:15:c7:e6:a6:b1:6e:ff:c3:7a:41:f3:1e:a5:f2: 74:9b:a9:19:74:0d:d5:99:1a:c5:e1:08:4d:dd:de: a8:19:b2:62:b2:08:df:dc:c4:07:e9:81:03:49:f7: d2:d4:62:a0:50:94:06:6b:d5:7c:c3:25:8a:bf:80: 51:ab:91:ea:65:ed:9c:fc:64:aa:fd:0d:87:ce:89: 9d:3b:1f:84:b7:c5:9d:5a:eb:4a:99:23:21:30:cc: 8f:bb:07:f5:59:be:2f:8d:9a:cb:c8:b5:7d:f4:f4: 07:3d:cf:79:86:50:f8:c2:e7:f7:5a:38:53:c0:06: bd:ed:79:2b:5a:5e:af:b0:c4:47:f9:42:86:35:68: 02:32:26:42:97:d2:74:b0:b9:5f:0e:41:3f:20:2e: 0d:57:47:0d:f7:84:56:c3:4a:98:e5:df:dc:05:e4: e0:90:7f:2f:10:1c:e0:33:2f:f4:2a:5e:ac:bb:75: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4E:C1:FC:AB:83:72:FF:DE:E5:9E:8B:E2:FF:44:E3:A5:D1:47:15 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b4:4f:26:01:38:30:45:10:c3:f3:12:cc:9a:6a:b6:a5:d0: cc:f7:32:bb:e0:3e:cb:64:bf:cd:d3:6a:0d:c4:00:18:46:10: f3:1d:97:18:b6:b5:55:39:e7:da:51:a9:22:9f:ee:d4:99:11: 16:eb:28:5b:05:9e:ef:64:d0:3b:e9:11:8c:7f:b5:26:8b:19: f0:96:f5:3f:96:4d:0d:b8:00:d1:ca:ca:d8:cf:bd:89:ea:97: f6:48:33:1a:23:2b:e8:6f:f2:5e:bd:ca:7c:05:af:a8:fc:ed: 3d:fd:f7:e9:5d:f8:9f:9d:4d:c9:e4:c6:ee:52:65:cd:54:18: eb:8c:10:98:2f:1b:23:97:31:64:98:87:25:bf:84:09:42:0d: 44:49:27:ef:23:b9:fd:3b:e5:c3:83:96:96:d0:8d:4e:81:b5: f3:91:88:17:e5:2f:03:73:dd:ca:79:cf:66:84:a6:e6:49:43: 90:94:0f:87:f3:02:42:67:39:1e:cd:2f:68:8b:fd:2f:1e:50: 39:b6:d8:5d:7f:e8:e9:97:4d:2d:5f:76:ba:4e:64:aa:97:f8: 41:11:64:f2:48:c4:7e:73:c1:1b:45:4c:91:59:a7:06:22:38: 7b:c9:d1:f3:27:42:7d:d3:19:e1:57:49:1b:88:48:a1:e0:51: 8a:c8:f2:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYwNzIzMDAwNTUzWhcNMjYwNzMwMDAwNTUzWjAYMRYwFAYD VQQDEw02YTYxNWFlMS1lYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+bsDY5gEQsNisyoDMpQDGcGFVvV0qGQvxJx2py0irBqvS0+usUY7slDmymI ljVajBGYz3tcvYd8lS6isMhROGymoYLMx38FSoy1FcfmprFu/8N6QfMepfJ0m6kZ dA3VmRrF4QhN3d6oGbJisgjf3MQH6YEDSffS1GKgUJQGa9V8wyWKv4BRq5HqZe2c /GSq/Q2HzomdOx+Et8WdWutKmSMhMMyPuwf1Wb4vjZrLyLV99PQHPc95hlD4wuf3 WjhTwAa97XkrWl6vsMRH+UKGNWgCMiZCl9J0sLlfDkE/IC4NV0cN94RWw0qY5d/c BeTgkH8vEBzgMy/0Kl6su3WeSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVOwfyr g3L/3uWei+L/ROOl0UcVMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5 YlE1cmF6a1dlMlhDRUpJUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWrRPJgE4MEUQw/MSzJpqtqXQzPcyu+A+y2S/zdNqDcQAGEYQ8x2XGLa1VTnn 2lGpIp/u1JkRFusoWwWe72TQO+kRjH+1JosZ8Jb1P5ZNDbgA0crK2M+9ieqX9kgz GiMr6G/yXr3KfAWvqPztPf336V34n51NyeTG7lJlzVQY64wQmC8bI5cxZJiHJb+E CUINREkn7yO5/Tvlw4OWltCNToG185GIF+UvA3PdynnPZoSm5klDkJQPh/MCQmc5 Hs0vaIv9Lx5QObbYXX/o6ZdNLV92uk5kqpf4QRFk8kjEfnPBG0VMkVmnBiI4e8nR 8ydCfdMZ4VdJG4hIoeBRisjyhw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:58:52 2026 by rpki-client